Palo Alto Networks GlobalProtect 资源管理错误漏洞

🗓️ 21 Jul 2021 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 2 Views

GlobalProtect has a resource management error enabling remote regular expression denial of service on multiple versions.

Reporter	Title	Published	Views	Family All 157
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js	30 Nov 202116:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	18 Feb 202220:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Color-String, and PostgreSQL affect IBM Spectrum Protect Plus	10 Dec 202120:01	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	26 Mar 202503:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	15 Apr 202503:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Node.js glob-parent denial of service vulnerability( CVE-2021-35065)	5 Jul 202322:16	–	ibm

Source	Link
github	www.github.com/gulpjs/glob-parent/commit/3e9f04a3b4349db7e1962d87c9a7398cda51f339
github	www.github.com/gulpjs/glob-parent/pull/49
security	www.security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294
vigilance	www.vigilance.fr/vulnerability/Node-js-glob-parent-overload-via-Regular-Expression-37055
auscert	www.auscert.org.au/bulletins/ESB-2023.1926
auscert	www.auscert.org.au/bulletins/ESB-2023.0816
access	www.access.redhat.com/security/cve/cve-2021-35065
packetstormsecurity	www.packetstormsecurity.com/files/170955/Red-Hat-Security-Advisory-2023-0634-01.html
ibm	www.ibm.com/support/pages/node/6525034
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021072101

23 May 2026 00:00Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.01589

SSVC

GlobalProtect Resource management Regular expression denial Denial of service Remote attack Affected versions